From 8b8e4af90f9822ae13b65e0f7e5edb9eb8676b03 Mon Sep 17 00:00:00 2001 From: Mario Pepe <14803862+mariopepe@users.noreply.github.com> Date: Tue, 17 Mar 2026 22:54:21 +0100 Subject: [PATCH 1/2] Improve GHSA-wp52-r2fp-4vmr --- .../2026/03/GHSA-wp52-r2fp-4vmr/GHSA-wp52-r2fp-4vmr.json | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/advisories/github-reviewed/2026/03/GHSA-wp52-r2fp-4vmr/GHSA-wp52-r2fp-4vmr.json b/advisories/github-reviewed/2026/03/GHSA-wp52-r2fp-4vmr/GHSA-wp52-r2fp-4vmr.json index 0d530dd2b6f77..a6f81d1626efb 100644 --- a/advisories/github-reviewed/2026/03/GHSA-wp52-r2fp-4vmr/GHSA-wp52-r2fp-4vmr.json +++ b/advisories/github-reviewed/2026/03/GHSA-wp52-r2fp-4vmr/GHSA-wp52-r2fp-4vmr.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-wp52-r2fp-4vmr", - "modified": "2026-03-11T21:12:09Z", + "modified": "2026-03-11T21:12:10Z", "published": "2026-03-10T21:32:15Z", "aliases": [ "CVE-2026-26801" @@ -55,6 +55,10 @@ { "type": "WEB", "url": "https://github.com/bpampuch/pdfmake/releases/tag/0.3.6" + }, + { + "type": "WEB", + "url": "https://mariopepe.github.io/cve-2026-26801-pdfmake-ssrf" } ], "database_specific": { From fd78baf6f4ccd89f3980aa8824cfb262bca5d5a2 Mon Sep 17 00:00:00 2001 From: mariopepe Date: Wed, 18 Mar 2026 01:04:20 +0100 Subject: [PATCH 2/2] Add discoverer credits for CVE-2026-26801 --- .../2026/03/GHSA-wp52-r2fp-4vmr/GHSA-wp52-r2fp-4vmr.json | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/advisories/github-reviewed/2026/03/GHSA-wp52-r2fp-4vmr/GHSA-wp52-r2fp-4vmr.json b/advisories/github-reviewed/2026/03/GHSA-wp52-r2fp-4vmr/GHSA-wp52-r2fp-4vmr.json index a6f81d1626efb..9c1ea5c2ce624 100644 --- a/advisories/github-reviewed/2026/03/GHSA-wp52-r2fp-4vmr/GHSA-wp52-r2fp-4vmr.json +++ b/advisories/github-reviewed/2026/03/GHSA-wp52-r2fp-4vmr/GHSA-wp52-r2fp-4vmr.json @@ -61,6 +61,15 @@ "url": "https://mariopepe.github.io/cve-2026-26801-pdfmake-ssrf" } ], + "credits": [ + { + "name": "Mario Pepe", + "contact": [ + "https://github.com/mariopepe" + ], + "type": "FINDER" + } + ], "database_specific": { "cwe_ids": [ "CWE-918"